Roles and Permissions via API

This guide describes the Roles and Permissions system. For details on all roles available in the legacy system, see Role-based permissions.

Overview

Use the Permissions API to programmatically manage access control across your Cloudinary account. The API allows you to create and assign roles and define custom permission policies.

This section covers:

• Manage roles: How to manage roles via the Permissions API, including viewing, creating, updating, and assigning roles

• Assign roles: How to assign roles to principals (users, groups, and API keys) via the Permissions API

• Define custom policies: How to define and apply custom permission policies using the Cedar-based schema

  Note

  Custom policies give you fine-grained control, but they can behave in unexpected ways if not configured correctly. Review them carefully and test to make sure they align with your intended access rules.